WordPress Marketplace 2.4.0 Arbitrary File Download

WordPress Marketplace version 2.4.0 suffers from an arbitrary file download vulnerability.